Skip to content

Bump tinypool and vite-plus - #91

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-fa91231941
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-fa91231941

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 10, 2026

Copy link
Copy Markdown
Contributor

Bumps tinypool to 2.1.2 and updates ancestor dependency vite-plus. These dependencies need to be updated together.

Updates tinypool from 2.1.0 to 2.1.2

Release notes

Sourced from tinypool's releases.

v2.1.2

Contains security fix for GHSA-85c8-ppgw-ccpr.

What's Changed

Full Changelog: tinylibs/tinypool@v2.1.1...v2.1.2

v2.1.1

Contains security fix for GHSA-5gmw-xhrv-c9v3.

What's Changed

Full Changelog: tinylibs/tinypool@v2.1.0...v2.1.1

Commits

Updates vite-plus from 0.3.0 to 0.3.3

Release notes

Sourced from vite-plus's releases.

vite-plus v0.3.3: Homebrew setup and workspace dependency fixes

This release fixes Homebrew setup, Windows installation, and workspace dependency commands. It also updates Rolldown, Oxlint, and Oxfmt.

Fixes & Enhancements

  • Homebrew installations complete setup once, retain their bundled CLI, and direct upgrades to brew upgrade vite-plus (#2729), by @​fengmk2.
  • Windows installations decode remote legacy PowerShell scripts correctly (#2701), by @​james-elicx.
  • vp migrate removes the unsupported React Refresh allowCompoundComponents option and warns about possible lint errors (#2702), by @​fengmk2.
  • New monorepo packages use the root lint configuration without a conflicting nested configuration (#2667), by @​semimikoh.
  • Yarn Classic rejects filtered additions and removals instead of changing unintended dependencies (#2705), by @​jong-kyung.
  • Yarn Berry rejects unsupported filtered updates and respects filters during recursive removal (#2709, #2712), by @​jong-kyung.
  • Yarn and Bun warn when a command does not support --workspace-root. Yarn Classic accepts root additions through vp add and vp install <packages> (#2713), by @​jong-kyung.
  • vp dedupe warns about unsupported check options (#2717), by @​jong-kyung.
  • Rust command output respects NO_COLOR (#2716), by @​liangmiQwQ.
  • Windows commands find lowercase shims in directories with case-sensitive file names (#2727), by @​fengmk2.

Dependency Updates

  • Update rolldown@1.2.8 to rolldown@1.2.9, oxlint@1.82.0 to oxlint@1.83.0, and oxfmt@0.67.0 to oxfmt@0.68.0. The new lint and format versions can flag code that passed before. Run vp fmt after upgrading if CI runs vp check (#2725), by @​voidzero-guard[bot].

Docs

Chore

Bundled Versions

Tool Version Source
vite 8.3.0 434e8e9
rolldown 1.2.9 5b4746e
tsdown 0.23.0 npm
vitest 4.1.11 npm
oxlint 1.83.0 npm
oxlint-tsgolint 7.0.2001 npm
oxfmt 0.68.0 npm

Upgrade

vp upgrade
</tr></table> 

... (truncated)

Commits
  • 45f9b9a release: v0.3.3: Homebrew setup and workspace dependency fixes (#2734)
  • 2722c75 fix(cli): resolve lowercase Windows shims in case-sensitive directories (#2727)
  • a3035cf fix(create): remove nested monorepo lint config (#2667)
  • 6089186 feat(deps): upgrade upstream dependencies (#2725)
  • ae2fe51 fix(cli): honor NO_COLOR in Rust output (#2716)
  • c596871 fix(installer): decode remote legacy PowerShell scripts (#2701)
  • c7c1e62 fix(migrate): omit unsupported React Refresh option (#2702)
  • 9fd0d0a release: v0.3.2: independent package-manager versions and Oxlint plugin APIs ...
  • 5b30ff0 revert(migrate): stop merging Oxc configs in existing projects (#2696)
  • ace6ceb fix(migrate): report skipped ESLint rules (#2689)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [tinypool](https://github.com/tinylibs/tinypool) to 2.1.2 and updates ancestor dependency [vite-plus](https://github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli). These dependencies need to be updated together.


Updates `tinypool` from 2.1.0 to 2.1.2
- [Release notes](https://github.com/tinylibs/tinypool/releases)
- [Commits](tinylibs/tinypool@v2.1.0...v2.1.2)

Updates `vite-plus` from 0.3.0 to 0.3.3
- [Release notes](https://github.com/voidzero-dev/vite-plus/releases)
- [Commits](https://github.com/voidzero-dev/vite-plus/commits/v0.3.3/packages/cli)

---
updated-dependencies:
- dependency-name: tinypool
  dependency-version: 2.1.2
  dependency-type: indirect
- dependency-name: vite-plus
  dependency-version: 0.3.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Oct 10, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
feedable Error Error Oct 10, 2026 11:14am UTC

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 10, 2026

This branch had an error being deployed

2 failed deployments
Preview — 84ef600b Deployed Oct 10, 2026 by vercel[bot]
Testing — 84ef600b Deployed Oct 10, 2026 by dependabot[bot] via ci #619
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants